Prompt-injection attack gets past Claude Code's auto mode in up to 80% of attempts, researcher says
In some runs auto mode let the malware process start, then refused Claude's own command to kill it. Anthropic closed the report as working as designed. Johann Rehberger says he has found an exploit against Claude Code running in auto...